Qubole IAM Credentials Compromised in Supply Chain Attack on Dozen+ Orgs
Published 2 d ago1 sourceEvidence: Reported
A threat actor leveraged compromised IAM credentials for Qubole's AWS account to access and exfiltrate data from multiple customers' AWS environments. The attack exploits trusted access relationships, highlighting supply-chain risk in cloud identity management. The full scope of affected customers and data is not yet disclosed.
AI disclosure: Model-written summary of the source, not a verified fact. Check the sources. How Mosaic works
Entities
A threat actor leveraged compromised Qubole IAM credentials to access and exfiltrate data from multiple customer AWS environments. This constitutes a supply chain attack exploiting trusted access relationships, with over a dozen organizations reportedly affected. The full scope of compromised data and affected entities remains unclear.
Published 2 d ago1 sourceEvidence: Reported
Published 2 d ago1 sourceEvidence: Reported
Published 3 h ago1 sourceEvidence: Reported
Published 15 h ago1 sourceEvidence: Reported
Published 2 d ago6 sourcesEvidence: Reported
Published 1 d ago10 sourcesEvidence: Reported
Published 1 d ago9 sourcesEvidence: Reported
Published 2 d ago13 sourcesEvidence: Reported